CVE-2025-27701 | BDVDB-2026-280370 Detail

Description#

In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array(). Later this values will be derefenced without prior NULL check, which can lead to local Temporary DoS or OOB Read, leading to information disclosure.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-05-27Record published in the CVE List.
2. Version 22025-09-04Most recent update recorded in the CVE List.